0%
0/1 Lessons
Getting Started with this Course • 26min
0 / 3 lessons complete
SCCM Configuration Manager Overview
Free Preview Lesson
Video | 8 min min
Prerequisites in a Production Environment
Free Preview Lesson
Video | 12 min min
Configuration Manager Overview Section Quiz
Free Preview Lesson
Quiz | 6 min min
System Center Configuration Manager - Features and Capibilities • 31min
0 / 5 lessons complete
Asset Management
Full Access Account Required
Video | 6 min min
Administrative Tasks
Full Access Account Required
Video | 5 min min
Client Management Part 1
Full Access Account Required
Video | 7 min min
Client Management Part 2
Full Access Account Required
Video | 5 min min
Features and Capabilities Section Quiz
Full Access Account Required
Quiz | 8 min min
SCCM 1902 Lab Setup • 51min
0 / 12 lessons complete
This section is optional
Full Access Account Required
Text | 1 min min
Lab Overview
Full Access Account Required
Video | 4 min min
Downloading and Installing VirtualBox
Full Access Account Required
Video | 2 min min
Creating Your NAT Network and VMs
Full Access Account Required
Video | 4 min min
Downloading and Mounting Server 2019 ISO
Full Access Account Required
Video | 3 min min
Installing Windows Server 2019 Part 1
Full Access Account Required
Video | 4 min min
Installing Windows Server 2019 Part 2
Full Access Account Required
Video | 3 min min
Downloading and Mounting Windows 10 ISO
Full Access Account Required
Video | 2 min min
Installing Windows 10
Full Access Account Required
Video | 4 min min
Configuring SADC01
Full Access Account Required
Video | 15 min min
Configuring our SAWS01 Workstation
Full Access Account Required
Video | 4 min min
Configuring our SASCCM01 Server
Full Access Account Required
Video | 5 min min
Installing SCCM 1902 Installation • 1hr 32min
0 / 11 lessons complete
SCCM Compatability Check
Full Access Account Required
Video | 2 min min
Download Required SCCM Software
Full Access Account Required
Video | 2 min min
Installing the ADK
Full Access Account Required
Video | 2 min min
Creating the System Management Container
Free Preview Lesson
Video | 4 min min
Creating Domain User Accounts
Full Access Account Required
Video | 8 min min
Extending the Active Directory Schema
Free Preview Lesson
Video | 5 min min
Configure Windows Firewall with Group Policy for SCCM
Full Access Account Required
Video | 7 min min
Install SQL Server 2017
Full Access Account Required
Video | 9 min min
Installing SCCM Dependent Server Roles
Full Access Account Required
Video | 3 min min
Installing System Center Configuration Manager
Full Access Account Required
Video | 5 min min
Lab: Installing System Center Configuration Manager
Full Access Account Required
Lab | 45 min min
Configuration Manager Basics • 1hr 58min
0 / 8 lessons complete
Console Overview Part 1
Full Access Account Required
Video | 12 min min
Console Overview Part 2
Full Access Account Required
Video | 10 min min
Site System Roles
Full Access Account Required
Video | 9 min min
Creating and Managing Administrative Users
Full Access Account Required
Video | 6 min min
Creating Boundary and Boundary Groups
Full Access Account Required
Video | 4 min min
Client Discovery Methods
Full Access Account Required
Video | 7 min min
SCCM Basics Section Quiz
Full Access Account Required
Quiz | 10 min min
Lab: SCCM Basics
Full Access Account Required
Lab | 60 min min
Updating SCCM • 30min
0 / 7 lessons complete
Understanding Windows ADK Compatibility
Full Access Account Required
Video | 4 min min
Configuration Manager Update Overview
Full Access Account Required
Video | 6 min min
How to Verify Your ADK Version
Full Access Account Required
Video | 2 min min
Installing ADK 1903
Full Access Account Required
Video | 2 min min
Updating SCCM
Full Access Account Required
Video | 4 min min
Verifying Our Configuration After Update
Full Access Account Required
Video | 6 min min
Updating SCCM Section Quiz
Full Access Account Required
Quiz | 6 min min
SCCM Client Installation • 46min
0 / 4 lessons complete
Preparing for Client Installations with Group Policy
Free Preview Lesson
Video | 12 min min
Client Push Installation
Free Preview Lesson
Video | 11 min min
Deploying the SCCM Client with Group Policy
Full Access Account Required
Video | 17 min min
Manual Client Installation
Full Access Account Required
Video | 6 min min
User and Device Collections • 1hr 6min
0 / 13 lessons complete
Collections Overview and the Direct Rule
Full Access Account Required
Video | 9 min min
Creating Include/Exclude Collections
Free Preview Lesson
Video | 5 min min
Query based User and Device Collections Introduction
Full Access Account Required
Video | 2 min min
Query Based User Collections Example #1
Full Access Account Required
Video | 5 min min
Query Based User Collections Example #2
Full Access Account Required
Video | 3 min min
Query Based User Collection Challenge #1
Full Access Account Required
Video | 2 min min
Query Based Device Collection Example #1
Full Access Account Required
Video | 3 min min
Role Based Administration
Full Access Account Required
Video | 2 min min
Assigning a User Collection to an Administrative Security Roll
Full Access Account Required
Video | 10 min min
Using a Collection to Enforce a Maintenance Window
Full Access Account Required
Video | 4 min min
Deploying Power Management to a Collection
Full Access Account Required
Video | 6 min min
Using a Collection to Turn-On the Remote Control Feature
Full Access Account Required
Video | 10 min min
User and Device Collection Section Quiz
Full Access Account Required
Quiz | 5 min min
Application Management • 2hr 34min
0 / 12 lessons complete
Application Management Overview
Free Preview Lesson
Video | 7 min min
Creating an Application using an MSI Part 1
Full Access Account Required
Video | 9 min min
Creating an Application using an MSI Part 2
Full Access Account Required
Video | 9 min min
Supersedence Part 1
Full Access Account Required
Video | 7 min min
Supersedence Part 2
Full Access Account Required
Video | 8 min min
Creating an Application using an EXE
Full Access Account Required
Video | 16 min min
Creating an Application that requires Approval
Full Access Account Required
Video | 12 min min
Creating a Package using an MSI
Full Access Account Required
Video | 9 min min
Uninstalling an Application
Free Preview Lesson
Video | 5 min min
Monitoring Applications
Full Access Account Required
Video | 4 min min
Lab: Application Deployment
Full Access Account Required
Lab | 60 min min
Application Management Section Quiz
Full Access Account Required
Quiz | 8 min min
Operating System Deployment • 23min
0 / 7 lessons complete
Create a Windows 10 Collection
Full Access Account Required
Text | 2 min min
OSD - The Basics
Full Access Account Required
Video | 3 min min
Setting Up a DHCP Server
Full Access Account Required
Video | 2 min min
Adding an Operating System to Configuration Manager
Free Preview Lesson
Video | 6 min min
Create a Deployments folder for the Captured Image
Full Access Account Required
Text | 1 min min
Creating a Task Sequence
Free Preview Lesson
Video | 5 min min
Enable PXE Support - Configure WDS
Full Access Account Required
Video | 4 min min
Endpoint Protection • 1hr 12min
0 / 10 lessons complete
An Overview of Network Security
Full Access Account Required
Video | 8 min min
Endpoint Protection Server Prerequisites
Full Access Account Required
Video | 6 min min
Endpoint Protection Licensing
Full Access Account Required
Video | 1 min min
Endpoint Protection Planning and Integration
Full Access Account Required
Video | 5 min min
Create a Shared Folder Named EPUdates
Full Access Account Required
Text | 2 min min
Endpoint Protection Server Configuration and Installation
Full Access Account Required
Video | 9 min min
Endpoint Protection Policy Overview
Free Preview Lesson
Video | 13 min min
The Anti-malware Policy Settings Overview
Full Access Account Required
Video | 7 min min
Configuring an Automatic Deployment Rule (ADR)
Full Access Account Required
Video | 7 min min
Endpoint Protection Client Installation
Full Access Account Required
Video | 14 min min
Troubleshooting • 37min
0 / 4 lessons complete
SCCM Troubleshooting Overview
Full Access Account Required
Video | 7 min min
The CMTrace Overview
Full Access Account Required
Video | 8 min min
Deploying CMTrace to a Device Collection
Full Access Account Required
Video | 7 min min
Troubleshooting a failed Client Push Install
Full Access Account Required
Video | 15 min min
Problems and Solutions from the Message Board • 14min
0 / 5 lessons complete
Cannot Establish a Remote Desktop Connection from SSCM to a Client - Alstud
Full Access Account Required
Video | 4 min min
Problems Downloading ADK
Full Access Account Required
Video | 2 min min
Problems using VB - AKM - Rajib
Full Access Account Required
Video | 4 min min
SCCM Console will not connect to the Site Database
Full Access Account Required
Text | 2 min min
OSD and Task Sequence Issues
Full Access Account Required
Text | 2 min min
Resources
There are no resources for this lesson.
Log in to your domain controller (in my case SADC01) and within Server Manager, click Tools > Active Directory Users and Computers:

Next, navigate to where you would like to store the domain user accounts for our SCCM installation. For my scenario, I am going to place everything under ServerAcademy.com > ServerAcademy:
Inside of the Service Accounts OU, create the following user:
- SQLService

I am going to configure the users password to never expire. This is generally a bad security practice and in a real production network, you should be constantly cycling secure passwords. If you don’t check this checkbox and the account password expires then the service that uses the service account will be broken until you fix the password.

I am going to use “Pa$$w0rd” as the password and I will create the user account.
Inside of the Groups OU, create the following groups:
- SQL Admins
- SCCM Admins


Next, open the “SQL Admins” group and add the appropriate members that you wish to be able to administrate your SQL server. I am going to include the following user accounts I have in my domain:
- paul.hill-admin
- robert.hill-admin
- test.user-admin
- Administrator

Next do the same for the “SCCM Admins” security group. In my case I am going to use the same two accounts since I am in my lab environment:

In theory, we could use a single group for SCCM and SQL, but in a real production network, you might have database admins that ONLY need access to the SQL Server databases and SCCM admins that do not need to access the SQL server database.
Configure Service Account GPO settings
Next we need to grant the “Log on as a service” right to our SQLService account. There are a couple of methods we could use to accomplish this task:
- Group Policy from our AD Server
- Local Group Policy on our SCCM Server (gpedit.msc)
We are going to use method #2...here’s why. If we configure the settings from our domain group policy using method #1, those settings will take precedence over our local group policy which will overwrite the automatically configured user accounts.
Explanation:
When we install the IIS roles on our SCCM, it will automatically configure the “Log on as a service” local group policy setting with a few IIS users accounts as shown in the photo below:

If we configure our domain Group Policy to include “ServerAcademy.com\SQLService”, that GPO setting will take precedence over (overwrite) these locally configured settings which will break things on your server. One example issue you might experience is the inability to install server roles and features.
Now let’s open the local group policy on the server by clicking the Windows button and typing “gpedit.msc”.

Navigate to the path below and right-click Log on as a service, then choose Properties:
Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Log on as a service
Next click Add User or Group

Search for and add the SQLService user account we created earlier then click OK

As an FYI - Once we install all the server roles for SCCM, this setting will be updated the show those listed below:

And that’s it! We are done creating and configuring the domain accounts that we need to install SCCM and SQL server.
Is there a difference between adding users to the local group policy of “Log on as service” instead of just adding the SQLService user to the Remote Desktop User local group?
Hi
Matthew Stricker
The best practice is to disable interactive and remote interactive sessions for service accounts.
Ricardo